BLACKLINE INC

Previous wording

Investing in our common stock involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Quarterly Report on Form 10-Q, including “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes, before making a decision to invest in our common stock. The risks and uncertainties described below are not the only ones we face. Additional risk and uncertainties not presently known to us or that we presently deem less significant may also impair our business operations. If any of the events or circumstances described in the following risk factors actually occurs, our business, operating results, financial condition, cash flows, and prospects could be materially and adversely affected. In that event, the market price of our common stock could decline, and you could lose part or all of your investment.

Current wording

Investing in our common stock involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Quarterly Report on Form 10-Q, including “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our unaudited condensed consolidated financial statements and related notes, before making a decision to invest in our common stock. The risks and uncertainties described below are not the only ones we face. Additional risk and uncertainties not presently known to us or that we presently deem less significant may also impair our business operations. If any of the events or circumstances described in the following risk factors actually occurs, our business, operating results, financial condition, cash flows, and prospects could be materially and adversely affected. In that event, the market price of our common stock could decline, and you could lose part or all of your investment.

Previous wording

•Interruptions or performance problems associated with the third-party software, SaaS applications or cloud providers upon which we rely to operate our business and deliver our software solutions may adversely affect our business and operating results.

Current wording

•Interruptions or performance problems associated with the third-party software, Software as a Service (“SaaS”) applications or cloud providers upon which we rely to operate our business and deliver our software solutions may adversely affect our business and operating results.

Previous wording

Our growth also depends upon our ability to add users and sell additional products to our existing customers. It is important for the growth of our business that our existing customers make additional significant purchases of our products and add additional users to our platform. Although our customers, users, and revenue have grown rapidly in the past, in recent periods our slower growth rates have reflected the size and scale of our business, as well as our focus on our strategic products. We cannot be assured that we will achieve similar growth rates in future periods as our customers, users, and revenue could decline, or grow more slowly than we expect. Our business also depends on retaining existing customers. If we do not retain customers, including due to the acquisition of our customers by other companies, or our customers downgrade or fail to renew their agreements with us, or move to our competitors, or if our customers do not purchase additional products or we do not add additional users to our platform, our revenues may grow more slowly than expected, may not grow at all or may decline. Additionally, increasing incremental sales to our current customer base may require additional sales efforts that are targeted at senior management, which efforts are often associated with complex customer requirements and additional time to evaluate and test our products, and can lead to long and unpredictable sales cycles, particularly in the current macroeconomic environment. There can be no assurance that our efforts will result in increased sales to existing customers or additional revenues.

Current wording

Our growth also depends upon our ability to add users and sell additional products to our existing customers. It is important for the growth of our business that our existing customers make additional significant purchases of our products and add additional users to our platform. Although our customers, users, and revenue have grown rapidly in the past, in recent periods our slower growth rates have reflected the size and scale of our business, as well as our focus on strategic products. In addition, our growth rates may be impacted by changing customer preferences, such as customer preference for platform offerings that unify upstream and downstream activities versus point solutions, increased competition across many of our product offerings, and diversion of IT budgets toward other technologies and priorities. We cannot be assured that we will achieve similar growth rates in future periods as our customers, users, and revenue could decline, or grow more slowly than we expect. Our business also depends on retaining existing customers. If we do not retain customers, including due to the acquisition of our customers by other companies, or our customers downgrade or fail to renew their agreements with us, or move to our competitors, or if our customers do not purchase additional products or we do not add additional users to our platform, our revenues may grow more slowly than expected, may not grow at all or may decline. Additionally, increasing incremental sales to our current customer base may require additional sales efforts that are targeted at senior management, which efforts are often associated with complex customer requirements and additional time to evaluate and test our products, and can lead to long and unpredictable sales cycles, particularly in the current macroeconomic environment. There can be no assurance that our efforts will result in increased sales to existing customers or additional revenues.

Previous wording

Our operating results may vary based on the impact of changes in our industry or the global economy on us or our customers. The revenue growth and potential profitability of our business depend on demand for business software applications and services generally, and for accounting and finance systems in particular. We are currently operating in a period of economic uncertainty and cannot predict the timing, strength, or duration of any economic downturn. The global economy has been, and continues to be, adversely affected by concerns of inflation and rising interest rates, adverse business conditions and liquidity concerns, as well as volatility and uncertainty in the banking and financial services sector. These general macroeconomic conditions have contributed to a more restrained and selective IT spending environment that could adversely affect demand for our products and make it difficult to accurately forecast and plan our future business activities. For example, since the second quarter of 2022, we have observed certain customers delaying and deferring purchasing decisions, which has resulted in the deterioration of near-term demand. In addition, professional services revenue may decrease as new implementation projects are delayed. To the extent unfavorable conditions in the national and global economy persist or worsen, our business could be harmed as current and potential customers may reduce accounting, finance, and technology budgets and spending, or postpone or choose not to purchase or renew subscriptions to our products, which they may consider discretionary. Weakening economic conditions, and related corporate cost-cutting and tighter budgets, could affect the rate of accounting and finance and information technology spending and adversely affect our current or potential customers’ ability or willingness to purchase our cloud platform, as well as further delay purchasing decisions, reduce the value or duration of their subscription contracts, or affect attrition rates, all of which would adversely affect our operating results. Prolonged economic uncertainties relating to macroeconomic trends could limit our ability to grow our business and negatively affect our operating results. Unfavorable trends in the national or global economy, such as rising interest rates and conditions resulting from financial and credit market fluctuations, may cause our customers and prospective customers to decrease their accounting and finance and information technology budgets, which would limit our ability to grow our business and negatively affect our operating results. The occurrence of a natural disaster, global public health crisis, geopolitical uncertainty or war has caused, and in the future may cause, customers to request concessions, including extended payment terms, free modules or better pricing.

Current wording

Our operating results may vary based on the impact of changes in our industry or the global economy on us or our customers. The revenue growth and potential profitability of our business depend on demand for business software applications and services generally, and for accounting and finance systems in particular. We are currently operating in a period of economic uncertainty and cannot predict the timing, strength, or duration of any economic downturn. The global economy has been, and continues to be, adversely affected by concerns of inflation and rising interest rates, adverse business conditions and liquidity concerns, as well as macroeconomic volatility and uncertainty. These general macroeconomic conditions have contributed to a more restrained and selective IT spending environment that could adversely affect demand for our products and make it difficult to accurately forecast and plan our future business activities. For example, since the second quarter of 2022, we have observed certain customers delaying and deferring purchasing decisions, which has resulted in the deterioration of near-term demand. In addition, professional services revenue may decrease as new implementation projects are delayed. To the extent unfavorable conditions in the national and global economy persist or worsen, our business could be harmed as current and potential customers may reduce accounting, finance, and technology budgets and spending, or postpone or choose not to purchase or renew subscriptions to our products, which they may consider discretionary. Weakening economic conditions, and related corporate cost-cutting and tighter budgets, could affect the rate of accounting and finance and information technology spending and adversely affect our current or potential customers’ ability or willingness to purchase our cloud platform, as well as further delay purchasing decisions, reduce the value or duration of their subscription contracts, or affect attrition rates, all of which would adversely affect our operating results. Prolonged economic uncertainties relating to macroeconomic trends could limit our ability to grow our business and negatively affect our operating results. Unfavorable trends in the national or global economy, such as rising interest rates and conditions resulting from financial and credit market fluctuations, may cause our customers and prospective customers to decrease their accounting and finance and information technology budgets, which would limit our ability to grow our business and negatively affect our operating results. The occurrence of a natural disaster, global public health crisis, geopolitical uncertainty or war has caused, and in the future may cause, customers to request concessions, including extended payment terms, free modules or better pricing.

Previous wording

We currently derive a significant portion of our revenue from our Close Process Management solution, and expect to continue to derive a majority of our revenues from our Close Process Management solution. As a result, the continued growth in market demand for this solution is critical to our continued success. We cannot be certain that any new software solutions or products we introduce will generate significant revenues. Accordingly, our business and financial results have been and will be substantially dependent on a limited number of solutions.

Current wording

We currently derive a majority of our revenue from our Close Process Management solution, and expect to continue to derive a majority of our revenues from our Close Process Management solution. As a result, the continued growth in market demand for this solution is critical to our continued success. We cannot be certain that any new software solutions or products we introduce will generate significant revenues. Accordingly, our business and financial results have been and will be substantially dependent on a limited number of solutions.

Previous wording

Use of our platform involves the storage, transmission and processing of our customers’ proprietary data, including highly confidential financial information regarding their business and personal or identifying information of their customers or employees. Additionally, we maintain our own proprietary, confidential and otherwise sensitive information. Our platform is at risk for security breaches and incidents as a result of third-party action, employee, vendor or contractor error or malfeasance, cyberattacks (including from nation states and affiliated actors) and other forms of hacking, denial of service attacks, malfeasance, ransomware, viruses and other malicious software, or other factors. The risk of a cybersecurity incident occurring has increased as more companies and individuals work remotely, potentially exposing us to new, complex threats and increasing the potential for security breaches or incidents relating to phishing and other social engineering attacks, use of personal devices, and employee, vendor, or service provider error or malfeasance. Additionally, geopolitical events such as the war in Ukraine may create heightened risks of cyber attacks for us and our service providers, and we and they may be unable to defend against any such attacks. If any unauthorized or inadvertent access to, or a security breach or incident impacting our platform or other systems or networks used in our business occurs, such event could result in significant interruptions or other disruptions to our software solutions, platform and technology, the loss, alteration, or unavailability of data, unauthorized access to, or use, disclosure, or unauthorized processing of data, including proprietary, personal, or confidential data, and any such event, or the belief or perception that it has occurred, could result in a loss of business, severe reputational damage adversely affecting customer or investor confidence, regulatory investigations and orders, litigation, indemnity obligations, and damages for contract breach or penalties for violation of applicable laws or regulations. Additionally, service providers who store or otherwise process data on our behalf, including third-party and public-cloud infrastructure, also face security risks. As we rely more on third-party and public-cloud infrastructure, we are increasingly dependent on third-party security measures to protect against unauthorized access, cyberattacks, and the mishandling of customer, employee and other confidential data, and we may be required to expend significant time and resources to address any incidents related to the failure of those third-party security measures to prevent, detect, remediate, and otherwise address security breaches or incidents. Our ability to monitor our third-party service providers' data security is limited, and in any event, attackers may be able to circumvent our third-party service providers' security measures. There have been and may continue to be significant att…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Use of our platform involves the storage, transmission and processing of our customers’ proprietary data, including highly confidential financial information regarding their business and personal or identifying information of their customers or employees. Additionally, we maintain our own proprietary, confidential and otherwise sensitive information. Our platform is at risk for security breaches and incidents as a result of third-party action, employee, vendor or contractor error or malfeasance, cyberattacks (including from nation states and affiliated actors) and other forms of hacking, denial of service attacks, malfeasance, ransomware, viruses and other malicious software, or other factors. The risk of a cybersecurity incident occurring has increased as more companies and individuals work remotely, potentially exposing us to new, complex threats and increasing the potential for security breaches or incidents relating to phishing and other social engineering attacks, use of personal devices, and employee, vendor, or service provider error or malfeasance. Additionally, geopolitical events such as the war in Ukraine may create heightened risks of cyber attacks for us and our service providers, and we and they may be unable to defend against any such attacks. If any unauthorized or inadvertent access to, or a security breach or incident impacting our platform or other systems or networks used in our business occurs, such event could result in significant interruptions or other disruptions to our software solutions, platform and technology, the loss, alteration, or unavailability of data, unauthorized access to, or use, disclosure, or unauthorized processing of data, including proprietary, personal, or confidential data, and any such event, or the belief or perception that it has occurred, could result in a loss of business, severe reputational damage adversely affecting customer or investor confidence, regulatory investigations and orders, litigation, indemnity obligations, and damages for contract breach or penalties for violation of applicable laws or regulations. Additionally, service providers who store or otherwise process data on our behalf, including third-party and public-cloud infrastructure, also face security risks. As we rely more on third-party and public-cloud infrastructure, we are increasingly dependent on third-party security measures to protect against unauthorized access, cyberattacks, and the mishandling of customer, employee and other confidential data, and we may be required to expend significant time and resources to address any incidents related to the failure of those third-party security measures to prevent, detect, remediate, and otherwise address security breaches or incidents. Our ability to monitor our third-party service providers' data security is limited, and in any event, attackers may be able to circumvent our third-party service providers' security measures. There have been and may continue to be significant att…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We incur significant expenses in our efforts to minimize the risks presented by security breaches and incidents, including deploying additional personnel and protection technologies, training employees annually, engaging in phishing simulation exercises, and engaging third-party experts and contractors. We continually increase our investments in cybersecurity to counter emerging risks and threats and to address certain other identified matters, and we anticipate being required to make substantial additional investments in our cybersecurity measures. If a high profile security breach or incident occurs with respect to another Software as a Service (“SaaS”) provider or other technology company, our current and potential customers may lose trust in the security of our platform or in the SaaS business model generally, which could adversely impact our ability to retain existing customers or attract new ones. Such a breach or incident, or series of breaches or incidents, could also result in regulatory or contractual security requirements that could make compliance challenging. Even in the absence of any actual or perceived security breach or incident, customer concerns about privacy, security, or data protection may deter them from using our platform for activities that involve personal or other sensitive information.

Current wording

We incur significant expenses in our efforts to minimize the risks presented by security breaches and incidents, including deploying additional personnel and protection technologies, training employees annually, engaging in phishing simulation exercises, and engaging third-party experts and contractors. We continually increase our investments in cybersecurity to counter emerging risks and threats and to address certain other identified matters, and we anticipate being required to make substantial additional investments in our cybersecurity measures. If a high profile security breach or incident occurs with respect to another SaaS provider or other technology company, our current and potential customers may lose trust in the security of our platform or in the SaaS business model generally, which could adversely impact our ability to retain existing customers or attract new ones. Such a breach or incident, or series of breaches or incidents, could also result in regulatory or contractual security requirements that could make compliance challenging. Even in the absence of any actual or perceived security breach or incident, customer concerns about privacy, security, or data protection may deter them from using our platform for activities that involve personal or other sensitive information.

Previous wording

Because the techniques used to obtain unauthorized access or to sabotage systems change frequently, and often are not identified until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. We may also experience security breaches and incidents that may remain undetected for an extended period of time. Periodically, we experience cyber security events including phishing attacks targeting our employees, web application and infrastructure attacks, and other information technology incidents. These threats continue to evolve in sophistication and volume and are difficult to detect and predict due to advances in electronic warfare techniques, advances in cryptography and other technologies including AI/ML, and new and sophisticated methods used by criminals including phishing, social engineering or other illicit acts. We may experience security breaches and incidents introduced through the tools and services we use. We continuously monitor our infrastructure, adjust our intrusion detection capabilities, and practice security-by-design principles in our software development lifecycle to help prevent and detect security breaches and incidents, including those relating to tools and services provided by third parties. However, there can be no assurance that our defensive measures will prevent cyber attacks or other security breaches or incidents, or allow us to identify, remediate, or otherwise respond to them in a timely or effective manner. Any such attacks, breaches or incidents, or perception that any have occurred, could damage our brand and reputation and negatively impact our business.

Current wording

Because the techniques used to obtain unauthorized access or to sabotage systems change frequently, and often are not identified until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. We may also experience security breaches and incidents that may remain undetected for an extended period of time. Periodically, we experience cyber security events including phishing attacks targeting our employees, web application and infrastructure attacks, and other information technology incidents. These threats continue to evolve in sophistication and volume and are difficult to detect and predict due to advances in electronic warfare techniques, advances in cryptography and other technologies including AI/ML, and new and sophisticated methods used by criminals including phishing, social engineering or other illicit acts. We have and may experience security breaches or incidents introduced through the tools and services we use. We continuously monitor our infrastructure, adjust our intrusion detection capabilities, and practice security-by-design principles in our software development lifecycle to help prevent and detect security breaches and incidents, including those relating to tools and services provided by third parties. However, there can be no assurance that our defensive measures will prevent cyber attacks or other security breaches or incidents, or allow us to identify, remediate, or otherwise respond to them in a timely or effective manner. Any such attacks, breaches or incidents, or perception that any have occurred, could damage our brand and reputation and negatively impact our business.

Previous wording

Our continued growth depends in part on the ability of our current and potential customers to access our platform at any time. Our platform is proprietary, and we rely on the expertise of members of our engineering, operations and software development teams for its continued performance. We have experienced, and may in the future experience, disruptions, outages and other performance problems due to a variety of factors, including infrastructure changes, introductions of new functionality, human or software errors, capacity constraints due to an overwhelming number of users accessing our platform simultaneously, denial of service attacks or other security related incidents. In some instances, we may not be able to identify the cause or causes of these performance problems within an acceptable period of time. Because of the seasonal nature of financial close activities, increasing complexity of our platform and expanding user population, it may become difficult to accurately predict and timely address performance and capacity needs during peak load times. If our platform is unavailable or if our users are unable to access it within a reasonable amount of time or at all, our business will be harmed. In addition, our infrastructure does not currently include the real-time mirroring of data. Therefore, in the event of any of the factors described above, or other failures of our infrastructure, customer data may be permanently lost. Our customer agreements typically include performance guarantees and service level standards that obligate us to provide credits in the event of a significant disruption in our platform. To the extent that we do not effectively address capacity constraints, upgrade our systems and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business and operating results may be adversely affected.

Current wording

Our continued growth depends in part on the ability of our current and potential customers to access our platform at any time. Our platform is proprietary, and we rely on the expertise of members of our engineering, operations and software development teams for its continued performance. We have experienced, and may in the future experience, disruptions, outages and other performance problems due to a variety of factors, including infrastructure changes, introductions of new functionality, human or software errors, capacity constraints due to an overwhelming number of users accessing our platform simultaneously, denial of service attacks or other security related incidents. In some instances, we may not be able to identify the cause or causes of these performance problems within an acceptable period of time. Because of the seasonal nature of financial close activities, increasing complexity of our platform and expanding user population, it may become difficult to accurately predict and timely address performance and capacity needs during peak load times. If our platform is unavailable or if our users are unable to access it within a reasonable amount of time or at all, our business will be harmed. Therefore, in the event of any of the factors described above, or other failures of our infrastructure, customer data may be permanently lost. Our customer agreements typically include performance guarantees and service level standards that obligate us to provide credits in the event of a significant disruption in our platform. To the extent that we do not effectively address capacity constraints, upgrade our systems and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business and operating results may be adversely affected.

Previous wording

We operate in a rapidly evolving industry focused on modernizing financial and accounting operations. Our solutions are relatively new and have been developed to respond to an increasingly global and complex business environment with more rigorous regulatory standards. For example, we have recently announced an AI-enabled solution that will be integrated into our Intercompany Financial Management solution. While the use of AI/ML is leading to advancements in technology, if our new solutions are not widely adopted and accepted, or fail to operate as expected, our business and reputation may be harmed. If organizations do not increasingly allocate their budgets to financial automation software as we expect or if we do not succeed in convincing potential customers that our platform should be an integral part of their overall approach to their accounting processes, our sales may not grow as quickly as anticipated, or at all. Our business is substantially dependent on enterprises recognizing that accounting errors and inefficiencies are pervasive and are not effectively addressed by legacy solutions. During the past twelve months, we have seen certain new and existing customers halt or decrease investment in work transformation, which has negatively impacted our business. Further deterioration in general economic conditions in the U.S. or worldwide, including as a result of continued uncertainty in the financial markets, increased inflation or interest rates, or uncertainty in the financial services markets associated with bank failures, or geopolitical events such as the war in Ukraine, may also cause our customers to reduce their overall information technology spending, and such reductions may disproportionately affect software solutions like ours to the extent customers view our solutions as discretionary. If our sales and revenue do not increase for any of these reasons, or any other reason, our business, financial condition and operating results may be materially adversely affected.

Current wording

We operate in a rapidly evolving industry focused on modernizing financial and accounting operations. Our solutions are relatively new and have been developed to respond to an increasingly global and complex business environment with more rigorous regulatory standards. For example, we have recently announced an AI-enabled solution that will be integrated into our Intercompany Financial Management solution. While the use of AI/ML is leading to advancements in technology, if our new solutions are not widely adopted and accepted, or fail to operate as expected, our business and reputation may be harmed. If organizations do not increasingly allocate their budgets to financial automation software as we expect or if we do not succeed in convincing potential customers that our platform should be an integral part of their overall approach to their accounting processes, our sales may not grow as quickly as anticipated, or at all. Our business is substantially dependent on enterprises recognizing that accounting errors and inefficiencies are pervasive and are not effectively addressed by legacy solutions. During the past twelve months, we continue to observe new and existing customers halt or decrease investment in work transformation, including the decision to continue operating legacy solutions, which has negatively impacted our business. Further deterioration in general economic conditions in the U.S. or worldwide, including as a result of continued uncertainty in the financial markets, increased inflation or interest rates, or uncertainty in the financial services markets associated with geopolitical events such as the war in Ukraine, may also cause our customers to reduce their overall information technology spending, and such reductions may disproportionately affect software solutions like ours to the extent customers view our solutions as discretionary. If our sales and revenue do not increase for any of these reasons, or any other reason, our business, financial condition and operating results may be materially adversely affected.

Previous wording

The year ended December 31, 2023 was our first profitable full fiscal year. However, we may not achieve or maintain profitability in future periods, or if we are profitable, we may not fully achieve our profitability targets. We have incurred net losses attributable to BlackLine, Inc. in recent periods, including $29.4 million and $115.2 million for the years ended December 31, 2022, and 2021, respectively. We had an accumulated deficit of $126.0 million at June 30, 2024. We expect our costs to increase in future periods as we continue to expend substantial financial and other resources on:

Current wording

The year ended December 31, 2023 was our first profitable full fiscal year. However, we may not achieve or maintain profitability in future periods, or if we are profitable, we may not fully achieve our profitability targets. We have incurred net losses attributable to BlackLine, Inc. in recent periods, including $29.4 million and $115.2 million for the years ended December 31, 2022 and 2021, respectively. We had an accumulated deficit of $111.8 million at September 30, 2024. We expect our costs to increase in future periods as we continue to expend substantial financial and other resources on:

Previous wording

We review our goodwill and intangible assets for impairment when events or changes in circumstances indicate the carrying value may not be recoverable. Goodwill is required to be tested for impairment at least annually. At June 30, 2024, we had goodwill and intangible assets with a net book value of $517.6 million primarily related to acquisitions. An adverse change in market conditions, particularly if such change has the effect of changing one of our critical assumptions or estimates, could result in a change to the estimation of fair value that could result in an impairment charge to our goodwill or intangible assets. Any such charges may have a material negative impact on our operating results.

Current wording

We review our goodwill and intangible assets for impairment when events or changes in circumstances indicate the carrying value may not be recoverable. Goodwill is required to be tested for impairment at least annually. At September 30, 2024, we had goodwill and intangible assets with a net book value of $512.6 million primarily related to acquisitions. An adverse change in market conditions, particularly if such change has the effect of changing one of our critical assumptions or estimates, could result in a change to the estimation of fair value that could result in an impairment charge to our goodwill or intangible assets. Any such charges may have a material negative impact on our operating results.

Previous wording

We depend on, and anticipate that we will continue to depend on, various strategic relationships in order to sustain and grow our business. We have established strong relationships with technology vendors such as SAP and Microsoft Dynamics to market our solutions to users of their ERP solutions, and professional services firms such as Deloitte and Ernst & Young, and business process outsourcers such as Cognizant, Genpact and IBM to supplement delivery and implementation of our applications. We believe these relationships enable us to effectively market our solutions by offering a complementary suite of services. In particular, our solution integrates with SAP’s ERP solutions. SAP is part of the reseller channel that we use in the ordinary course of business. SAP has the ability to resell our solutions as SAP SolEx, for which we receive a percentage of the revenues. If we are unsuccessful in maintaining our relationship with SAP, if our reseller arrangement with SAP is less successful than we anticipate, if our customers that use an SAP ERP solution do not renew their subscriptions directly with us and instead purchase our solution through the SAP reseller channel or if we are unsuccessful in supporting or expanding our relationships with other companies, our business would be adversely affected. Additionally, while we continue to build relationships with a variety of third-party partners, to the extent that our partnership with SAP continues to expand, this partnership may be a deterrent to other potential partners.

Current wording

We depend on, and anticipate that we will continue to depend on, various strategic relationships in order to sustain and grow our business. We have established strong relationships with technology vendors such as SAP and Microsoft Dynamics to market our solutions to users of their ERP solutions, and professional services firms such as Deloitte and Ernst & Young, and business process outsourcers such as Cognizant, Genpact and IBM to supplement delivery and implementation of our applications. We believe these relationships enable us to effectively market our solutions by offering a complementary suite of services. In particular, our solution integrates with SAP’s ERP solutions. SAP is part of the reseller channel that we use in the ordinary course of business, and accounts for a material portion of our total revenue. SAP has the ability to resell our solutions as SAP SolEx, for which we receive a percentage of the revenues. If we are unsuccessful in maintaining our relationship with SAP, if our reseller arrangement with SAP is less successful than we anticipate, if our customers that use an SAP ERP solution do not renew their subscriptions directly with us and instead purchase our solution through the SAP reseller channel or if we are unsuccessful in supporting or expanding our relationships with other companies, our business would be adversely affected. Additionally, while we continue to build relationships with a variety of third-party partners and will continue to support all ERP solutions, to the extent that our partnership with SAP continues to expand, this partnership may be a deterrent to other potential partners.

Previous wording

We do not control the operation of our public cloud providers. Any changes in third-party service levels or any disruptions or delays from errors, defects, hacking incidents, security breaches, computer viruses, DDoS attacks, bad acts or performance problems could harm our reputation, damage our customers’ businesses, and adversely affect our business and operating results. Our public cloud providers are also vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, war, public health crises, terrorist attacks, power losses, hardware failures, systems failures, telecommunications failures and similar events. We may have limited remedies against third-party providers in the event of any service disruptions. If our third-party public cloud providers are compromised or unavailable or our customers are unable to access our solutions for any reason, our business would be materially and adversely affected.

Current wording

We do not control the operation of our public cloud providers. Any changes in third-party service levels or any disruptions or delays from errors, defects, hacking incidents, security breaches, computer viruses, denial of service attacks, bad acts or performance problems could harm our reputation, damage our customers’ businesses, and adversely affect our business and operating results. Our public cloud providers are also vulnerable to damage or interruption from earthquakes, hurricanes, floods, fires, war, public health crises, terrorist attacks, power losses, hardware failures, systems failures, telecommunications failures and similar events. We may have limited remedies against third-party providers in the event of any service disruptions. If our third-party public cloud providers are compromised or unavailable or our customers are unable to access our solutions for any reason, our business would be materially and adversely affected.

Previous wording

We currently maintain offices and/or have personnel in Australia, Canada, France, Germany, India, Japan, Mexico, the Netherlands, Poland, Romania, Singapore, and the United Kingdom, and we intend to build out our international operations. We have also executed several acquisitions and strategic transactions as part of our ongoing international expansion strategy. We derived approximately 29% and 28% of our revenues from sales outside the U.S. in the six months ended June 30, 2024 and 2023, respectively. Any international expansion efforts that we may undertake, including acquisitions of businesses outside the U.S., such as our acquisition of Rimilia Holdings Ltd. or our acquisition of FourQ Systems, Inc. may not be successful. In addition, conducting international operations in new markets subjects us to new risks that we have not generally faced in the U.S. These risks include:

Current wording

We currently maintain offices and/or have personnel in Australia, Canada, France, Germany, India, Japan, Mexico, the Netherlands, Poland, Romania, Singapore, and the United Kingdom, and we intend to build out our international operations. We have also executed several acquisitions and strategic transactions as part of our ongoing international expansion strategy. We derived approximately 29% and 28% of our revenues from sales outside the U.S. in the nine months ended September 30, 2024 and 2023, respectively. Any international expansion efforts that we may undertake, including acquisitions of businesses outside the U.S., may not be successful. In addition, conducting international operations in new markets subjects us to new risks that we have not generally faced in the U.S. These risks include:

Previous wording

Privacy, data protection, and cybersecurity have become significant issues in the U.S., Europe, and in many other jurisdictions where we offer our products. Following the European Union’s passage of the General Data Protection Regulation (“GDPR”), which became effective in May 2018, the global regulatory landscape relating to privacy, data protection, and cybersecurity has grown increasingly complex and fragmented and is rapidly evolving. As a result, our business faces current and prospective risks related to increased regulatory compliance costs, reputational harm, negative effects on our existing business and on our ability to attract and retain new customers, and increased potential exposure to regulatory enforcement, litigation, and/or financial penalties for non-compliance.

Current wording

Privacy, data protection, and cybersecurity have become significant issues in the U.S., Europe, and in many other jurisdictions where we offer our products. Following the European Union’s passage of the General Data Protection Regulation (“GDPR”), which became effective in May 2018, the global regulatory landscape relating to privacy, data protection, and cybersecurity has grown increasingly complex and fragmented and is rapidly evolving. As a result, our business faces current and prospective risks related to increased regulatory compliance costs, reputational harm, negative effects on our existing business and on our ability to attract and retain new customers, and increased potential exposure to regulatory enforcement, litigation, and/or financial penalties for non-compliance. For example, in July 2020, the Court of Justice of the European Union (“CJEU”) invalidated the Privacy Shield framework, which enabled companies to legally transfer data from the European Economic Area (“EEA”) to the U.S. This ruling from the CJEU and recent rulings from various European Union (“EU”) member state data protection authorities have created complexity and uncertainty regarding processing and transfers of personal data from the EEA to the U.S. and certain other countries outside the EEA.

Previous wording

Moreover, on June 4, 2021, the European Commission adopted new Standard Contractual Clauses (“SCCs”), which impose additional obligations relating to personal data transfers out of the EEA. The new SCCs, and similar standard contractual clauses adopted in the UK, may increase the legal risks and liabilities associated with cross-border data transfers, and result in material increased compliance and operational costs. Following issuance of a U.S. Executive Order, a new framework, the EU-U.S. Data Privacy Framework (“DPF”) was created. Following an adequacy decision issued by the European Commission on July 10, 2023, the DPF, along with a UK extension to the DPF that allows the transfer of personal data from the UK to the U.S. (the “UK DPF Extension”), are available for companies to make use of to legitimize personal data transfers to the U.S. from the EEA and UK. We have certified to the U.S. Department of Commerce that we adhere to the DPF and UK DPF Extension. However, the DPF has been subject to a legal challenge, and it and the UK DPF Extension may be subject to legal challenges in the future from privacy advocacy groups or others. The European Commission's adequacy decision regarding the DPF also provides that the DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations in scope by the European Commission. More generally, uncertainty may continue about the legal requirements for transferring customer personal data to and from the EEA, UK, and other regions, an integral process of our business. Other countries such as China have passed or are considering passing laws imposing varying degrees of restrictive data residency requirements, which have created additional costs and complexity, and any new requirements may result in additional costs and complexity.

Current wording

Moreover, on June 4, 2021, the European Commission adopted new Standard Contractual Clauses (“SCCs”), which impose additional obligations relating to personal data transfers out of the EEA. The new SCCs, and similar standard contractual clauses adopted in the UK, may increase the legal risks and liabilities associated with cross-border data transfers, and result in material increased compliance and operational costs. Following issuance of a U.S. Executive Order, a new framework, the EU-U.S. Data Privacy Framework (“DPF”) was created. Following an adequacy decision issued by the European Commission on July 10, 2023, the DPF, along with a UK extension to the DPF that allows the transfer of personal data from the UK to the U.S. (the “UK DPF Extension”) and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), are available for companies to make use of to legitimize personal data transfers to the U.S. from the EEA, Switzerland, and UK. We have certified to the U.S. Department of Commerce that we adhere to the DPF, UK DPF Extension, and Swiss-U.S. DPF. However, the DPF has been subject to a legal challenge, and it, the UK DPF Extension, and the Swiss-U.S. DPF may be subject to legal challenges in the future from privacy advocacy groups or others. The European Commission's adequacy decision regarding the DPF also provides that the DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations in scope by the European Commission. More generally, uncertainty may continue about the legal requirements for transferring customer personal data to and from the EEA, UK, Switzerland, and other regions, an integral process of our business. Other countries have passed or are considering passing laws imposing varying degrees of restrictive data residency requirements, which have created additional costs and complexity, and any new requirements may result in additional costs and complexity.

Previous wording

Risks Related to Our Outstanding Convertible Notes

Current wording

Risks Related to Our Outstanding Convertible Senior Notes

Previous wording

As of June 30, 2024, we had $250.0 million aggregate principal amount of our 0.125% Convertible Senior Notes due in 2024 (the “2024 Notes”) outstanding, $230.2 million aggregate principal amount of our 0.00% Convertible Senior Notes due in 2026 (the “2026 Notes”), and $675.0 million aggregate principal amount of our 1.00% Convertible Senior Notes due in 2029 (the “2029 Notes” and, together with the 2024 Notes and the 2026 Notes, the “Notes” or “convertible senior notes”) outstanding.

Current wording

As of September 30, 2024, we had $230.2 million aggregate principal amount of our 0.00% Convertible Senior Notes due in 2026 (the “2026 Notes”) and $675.0 million aggregate principal amount of our 1.00% Convertible Senior Notes due in 2029 (the “2029 Notes” and, together with the 2026 Notes, the “Notes” or “convertible senior notes”) outstanding.

Previous wording

In the event the conditional conversion feature of any series of Notes is triggered, holders of the Notes of such series will be entitled under the applicable indenture governing the Notes to convert such Notes at any time during the specified periods at their option. The 2024 Convertible Notes became convertible on May 1, 2024 and were repaid on August 1, 2024. As of June 30, 2024, the conditional conversion features of the remaining Notes were not triggered. If the conditional conversion feature of any series of Notes is triggered and one or more holders of a series elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation in cash, which could adversely affect our liquidity. In addition, in certain circumstances, such as conversions by holders or redemption, we could be required under applicable accounting rules to reclassify all or certain of the outstanding principal of such series of Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital.

Current wording

In the event the conditional conversion feature of any series of Notes is triggered, holders of the Notes of such series will be entitled under the applicable indenture governing the Notes to convert such Notes at any time during the specified periods at their option. The 2024 Convertible Senior Notes became convertible on May 1, 2024 and were repaid on August 1, 2024. As of September 30, 2024, the conditional conversion features of the remaining Notes were not triggered. If the conditional conversion feature of any series of Notes is triggered and one or more holders of a series elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation in cash, which could adversely affect our liquidity. In addition, in certain circumstances, such as conversions by holders or redemption, we could be required under applicable accounting rules to reclassify all or certain of the outstanding principal of such series of Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital.

Previous wording

As a public company, we are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”) the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, the listing requirements of Nasdaq, and other applicable securities rules and regulations. Compliance with these rules and regulations increases our legal and financial compliance costs, make some activities more difficult, time-consuming, or costly, and increase demand on our systems and resources. The Exchange Act requires, among other things, that we file annual, quarterly and current reports with respect to our business and operating results. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight may be required. We are required to disclose changes made in our internal control and procedures on a quarterly basis and are required to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting on an annual basis. Additionally, our independent registered public accounting firm is required to attest to the effectiveness of our internal control over financial reporting pursuant to Section 404. As a result of the complexity involved in complying with the rules and regulations applicable to public companies, our management’s attention may be diverted from other business concerns, which could adversely affect our business and operating results. Although we have hired additional employees to assist us in complying with these requirements, we may need to hire more employees or engage outside consultants, which will increase our operating expenses.

Current wording

Street Reform and Consumer Protection Act of 2010, the listing requirements of Nasdaq, and other applicable securities rules and regulations. Compliance with these rules and regulations increases our legal and financial compliance costs, make some activities more difficult, time-consuming, or costly, and increase demand on our systems and resources. The Exchange Act requires, among other things, that we file annual, quarterly and current reports with respect to our business and operating results. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight may be required. We are required to disclose changes made in our internal control and procedures on a quarterly basis and are required to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting on an annual basis. Additionally, our independent registered public accounting firm is required to attest to the effectiveness of our internal control over financial reporting pursuant to Section 404. As a result of the complexity involved in complying with the rules and regulations applicable to public companies, our management’s attention may be diverted from other business concerns, which could adversely affect our business and operating results. Although we have hired additional employees to assist us in complying with these requirements, we may need to hire more employees or engage outside consultants, which will increase our operating expenses.